Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebe9d69d-00f7-4f22-84ad-0579d487e844/c32e1c8f7afada4cb53c0f4a125f75415bab49f5.mft
File: c32e1c8f7afada4cb53c0f4a125f75415bab49f5.mft (raw, json)
Hash identifier: NKxN+dbfVTodgsDO3hJPSzHPBA0emv4OOxYVQ7T2nQM=
Subject key identifier: 1F:93:06:75:E0:6E:60:0B:82:A5:0C:35:77:F4:E2:75:6A:9A:10:A9
Authority key identifier: D3:C7:AC:92:81:AC:18:9D:B4:A7:C3:17:BE:EF:0F:00:32:16:33:FA
Certificate issuer: /CN=c32e1c8f7afada4cb53c0f4a125f75415bab49f5
Certificate serial: 040159
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c32e1c8f7afada4cb53c0f4a125f75415bab49f5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ebe9d69d-00f7-4f22-84ad-0579d487e844/c32e1c8f7afada4cb53c0f4a125f75415bab49f5.mft
Manifest number: 0211
Signing time: Mon 15 Apr 2024 06:21:28 +0000
Manifest this update: Mon 15 Apr 2024 05:20:39 +0000
Manifest next update: Thu 18 Apr 2024 07:21:39 +0000
Files and hashes: 1: c32e1c8f7afada4cb53c0f4a125f75415bab49f5.crl (hash: nHr7uWUZUgpboNDMPqjl3XN/ZAdH1Qvn2iYnujD6hF8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262489 (0x40159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32e1c8f7afada4cb53c0f4a125f75415bab49f5
Validity
Not Before: Apr 15 05:20:39 2024 GMT
Not After : Apr 18 07:21:39 2024 GMT
Subject: CN=1cdb0f371f503753b85da586608928dd8275d8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:77:a5:26:69:42:5f:67:12:c7:f2:0e:bb:
ce:04:3e:08:71:b1:ff:14:7e:42:20:64:65:8c:78:
7f:2a:f7:16:21:9c:73:db:5d:46:99:9a:f4:a0:15:
0f:89:09:59:fe:a0:93:18:eb:8a:16:8a:73:51:6f:
9c:e8:1a:91:a2:36:3f:a2:0b:58:81:88:ac:8d:b9:
6f:ea:ae:b7:d2:a6:1d:90:0d:a9:fc:e0:3a:f0:ec:
c7:16:f5:a0:52:b7:67:48:5a:1b:a5:c8:cb:99:b5:
75:00:7d:66:f8:41:9a:1e:63:e7:b1:43:9c:04:9a:
bb:c0:56:bb:e4:9b:a0:9d:d2:50:2a:46:30:19:04:
5f:04:58:2f:1b:d6:75:56:cb:f3:c0:9f:cd:8f:1b:
4b:ea:13:4e:87:76:75:f7:32:e1:b6:76:8b:36:6e:
22:d2:8e:ed:87:75:75:c4:35:38:89:2a:05:bd:5c:
93:be:1e:c2:11:8b:53:0d:e2:97:e6:63:63:58:79:
14:8b:59:34:52:1d:f5:43:42:75:9c:37:9b:9a:ae:
aa:d4:ed:cc:3d:30:de:d8:d8:97:dd:fa:68:17:da:
25:1e:7b:bf:a7:1c:5f:1e:71:1f:20:83:e6:d8:b5:
54:02:eb:8c:61:e4:f9:38:a4:20:3e:b2:7d:18:e3:
b4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:93:06:75:E0:6E:60:0B:82:A5:0C:35:77:F4:E2:75:6A:9A:10:A9
X509v3 Authority Key Identifier:
keyid:D3:C7:AC:92:81:AC:18:9D:B4:A7:C3:17:BE:EF:0F:00:32:16:33:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c32e1c8f7afada4cb53c0f4a125f75415bab49f5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebe9d69d-00f7-4f22-84ad-0579d487e844/c32e1c8f7afada4cb53c0f4a125f75415bab49f5.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ebe9d69d-00f7-4f22-84ad-0579d487e844/c32e1c8f7afada4cb53c0f4a125f75415bab49f5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:48:eb:d1:8d:0e:2a:58:8d:4e:9e:b9:37:37:c0:96:25:16:
87:21:c5:bb:d3:a5:b6:ec:b1:a6:8d:c2:ab:58:da:69:b4:cd:
f1:bf:37:2f:1b:dc:7c:43:5b:5b:78:a8:84:03:ff:03:71:92:
3a:a4:ed:fa:8c:2f:c2:18:e0:3e:5b:7b:b1:cc:8a:a3:eb:3e:
60:49:e3:74:6c:fa:76:c0:72:aa:98:ea:84:0c:cb:e1:57:65:
ca:d5:46:04:5c:80:a6:7a:28:1b:fa:7a:b8:43:2a:62:ad:d0:
bd:2e:56:67:1e:28:87:c0:5d:2b:91:9c:50:87:8a:65:b4:64:
f7:d9:c3:fd:a9:21:5c:21:e8:68:8d:91:ba:a9:a9:8b:e7:cf:
a5:fe:c7:f5:23:3e:cd:92:4c:de:7c:02:f3:f8:7b:a7:ab:f9:
bf:45:75:a9:19:5e:7b:0a:ad:a8:97:4f:e1:ca:59:d0:e2:3c:
d5:29:5b:27:c6:b4:3b:33:b2:cf:21:e2:3e:9a:93:33:6d:0a:
88:9c:3e:fd:c2:2d:99:a9:52:8c:78:93:1b:e7:b1:c4:94:bf:
e8:27:5c:93:28:20:0a:ec:6f:a8:25:dd:0b:00:62:60:55:5f:
c0:42:b3:a2:1a:fe:5f:ae:76:0f:f7:17:ae:a1:0e:bd:bc:2c:
a9:72:b2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org